$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.cer File: 1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.cer (raw, json) Hash identifier: Qo/lxenddSns/O261xToEctZhy5Ev+i8kX82C/BnTtQ= Subject key identifier: 1B:D5:27:E3:FA:48:31:91:A7:B6:AD:9B:3B:FA:57:E0:23:A2:1D:E2 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 411564061CA492790ED6D05C20C9263164AFD0C9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 20 Aug 2026 21:00:03 +0000 Certificate not after: Thu 19 Aug 2027 21:05:03 +0000 Subordinate resources: AS: 274286 IP: 2803:c830::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Sep 2026 10:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:15:64:06:1c:a4:92:79:0e:d6:d0:5c:20:c9:26:31:64:af:d0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Aug 20 21:00:03 2026 GMT Not After : Aug 19 21:05:03 2027 GMT Subject: CN=1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:96:07:d3:ca:43:b5:a0:75:aa:40:48:bc: 47:50:a9:4d:33:1e:45:6c:b7:c7:2a:0a:e0:ec:07: 80:08:b6:77:19:a6:45:fa:a0:49:e4:59:7e:88:34: 4a:5f:22:49:b1:1c:2e:cc:cd:0d:43:6d:35:09:63: 2a:81:9b:23:bc:f9:bb:2b:38:ab:fa:c2:ce:c4:18: 54:b7:84:b2:92:71:d5:23:55:5f:f6:fe:2d:ed:76: 1a:b7:b0:dc:b8:45:5e:44:61:6a:aa:c3:05:09:cd: 91:61:bd:e5:18:f9:b9:34:06:9d:e1:9e:8a:e9:9b: 03:0b:7c:a4:ef:3a:40:9a:ee:ae:18:eb:64:36:51: c8:e2:3f:75:41:5e:4c:1c:03:00:21:57:ab:cf:e2: da:ef:73:36:36:42:db:b2:2b:9e:f7:45:6a:8a:75: ca:24:8b:b1:92:76:01:c4:e4:c6:d0:51:bb:c8:05: 56:86:f4:00:1b:f1:80:7e:57:61:df:92:fd:34:cc: fe:97:74:dd:31:e3:bf:13:e1:88:e9:b0:13:d7:3e: 75:77:a5:eb:7a:c1:d2:58:d1:32:3b:25:93:a7:2d: fc:45:54:54:44:f4:d5:08:b9:8f:da:39:26:e7:c6: 7f:45:80:75:92:6d:29:a0:c5:02:72:50:43:14:73: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:D5:27:E3:FA:48:31:91:A7:B6:AD:9B:3B:FA:57:E0:23:A2:1D:E2 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0BE0D71C07FB13C464C164297B054245FE4720D49F6C0BD44C0BB2AE59F18643/0/1BD527E3FA483191A7B6AD9B3BFA57E023A21DE2.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:c830::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274286 Signature Algorithm: sha256WithRSAEncryption 31:87:c2:f7:30:84:ec:7c:e5:9a:74:80:a0:25:36:ce:18:15: ad:75:62:6f:93:08:7e:b3:69:f3:c5:7a:0d:c3:f5:e2:46:08: 54:47:a6:c7:7e:f5:45:63:0e:c2:34:53:29:6b:12:9e:d6:80: 8e:41:f1:4a:ec:7a:bb:e0:2a:c5:18:83:b0:63:82:df:1f:22: bb:a1:34:76:9f:a3:5c:5a:3d:b1:97:02:47:96:28:88:e9:11: 13:6a:b7:41:41:4d:13:e0:20:25:a1:68:ed:41:85:6d:92:9a: ed:80:58:f7:1b:c6:59:ca:cd:14:03:46:95:ab:96:8f:50:25: cb:24:1a:12:d0:e4:e9:e6:d6:b4:25:81:0c:91:b2:8c:0f:d2: 52:19:da:c1:c2:de:bb:09:3e:42:e3:66:62:c4:3e:0a:fa:d8: 70:b9:dc:a7:21:36:bf:68:c1:08:eb:84:28:4d:54:26:01:c2: 84:6a:9f:32:91:3f:d7:c7:b1:b1:58:8e:ce:ca:e9:3a:01:a2: e6:9d:cd:f8:59:18:ae:ad:59:32:b5:e5:88:ff:62:90:a3:b7: 4f:eb:a7:1e:e3:66:77:16:d1:84:79:4f:a7:5c:05:a1:e1:98: a0:70:a9:f5:0a:27:7e:9b:24:62:43:7b:5c:43:be:b0:c4:65: 54:06:08:84 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUQRVkBhykknkO1tBcIMkmMWSv0MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjA4MjAyMTAwMDNaFw0yNzA4MTkyMTA1MDNaMDMxMTAvBgNV BAMTKDFCRDUyN0UzRkE0ODMxOTFBN0I2QUQ5QjNCRkE1N0UwMjNBMjFERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QpYH08pDtaB1qkBIvEdQqU0z HkVst8cqCuDsB4AItncZpkX6oEnkWX6INEpfIkmxHC7MzQ1DbTUJYyqBmyO8+bsr OKv6ws7EGFS3hLKScdUjVV/2/i3tdhq3sNy4RV5EYWqqwwUJzZFhveUY+bk0Bp3h norpmwMLfKTvOkCa7q4Y62Q2UcjiP3VBXkwcAwAhV6vP4trvczY2QtuyK573RWqK dcoki7GSdgHE5MbQUbvIBVaG9AAb8YB+V2Hfkv00zP6XdN0x478T4YjpsBPXPnV3 pet6wdJY0TI7JZOnLfxFVFRE9NUIuY/aOSbnxn9FgHWSbSmgxQJyUEMUc81vAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQb1Sfj+kgxkae2 rZs7+lfgI6Id4jAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEJFMEQ3MUMwN0ZCMTNDNDY0QzE2NDI5 N0IwNTQyNDVGRTQ3MjBENDlGNkMwQkQ0NEMwQkIyQUU1OUYxODY0My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQkUwRDcxQzA3RkIxM0M0NjRDMTY0Mjk3QjA1NDI0NUZFNDcyMEQ0OUY2 QzBCRDQ0QzBCQjJBRTU5RjE4NjQzLzAvMUJENTI3RTNGQTQ4MzE5MUE3QjZBRDlC M0JGQTU3RTAyM0EyMURFMi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAPIMDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEL24wDQYJKoZIhvcNAQELBQADggEBADGHwvcw hOx85Zp0gKAlNs4YFa11Ym+TCH6zafPFeg3D9eJGCFRHpsd+9UVjDsI0UylrEp7W gI5B8UrservgKsUYg7Bjgt8fIruhNHafo1xaPbGXAkeWKIjpERNqt0FBTRPgICWh aO1BhW2Smu2AWPcbxlnKzRQDRpWrlo9QJcskGhLQ5Onm1rQlgQyRsowP0lIZ2sHC 3rsJPkLjZmLEPgr62HC53KchNr9owQjrhChNVCYBwoRqnzKRP9fHsbFYjs7K6ToB ouadzfhZGK6tWTK15Yj/YpCjt0/rpx7jZncW0YR5T6dcBaHhmKBwqfUKJ36bJGJD e1xDvrDEZVQGCIQ= -----END CERTIFICATE-----Generated at Fri Sep 11 19:56:17 2026 by rpki-client